Please help me design my home network (with firewall)

[DumbGuy]

Okay, I got the hardware ready, just need to go over the topology on how the hell I'm going to add a firewall/IDS system to my current network.

Current Network:

DSL Modem ---> DSL/Router (Natting) ---> 5-port Hub --> Machines (Including a webserver)

Now, I want to add a firewall/IDS machine (linux of course 🙂 ). I have an idea on how to do it, but I'm still not clear about it:

DSL Modem ---> DSL/Router (natting?) ---> Firewall/IDS (with 2 NICs) ----> Switch ---> Machines.

Is this good? or should I put the Firewall right after the modem?
What do u guys think?

 

[JackMDS]

DSL Modem ---> Proxy/ Firewall/IDS (with 2 NICs) ----> Switch ---> Machines.

The Router goes to the Trade Forum.

The Content of the Following Link Might Help:

Firewall and Proxy Server - HOWTO.

 

[DumbGuy]

yeah I was thinking of doing that.. but I don't really want to get rid of my router, lol honestly. I don't know why =)

Should I disable DHCP in the router, and make the firewall do that job?

 

[skyking]

The firewall box can handle dhcp and nat. the only advantage in keeping the router around is if you have a failure of the firewall box (I have lost an old hard drive, for instance), you can hook up the router temprarily with a software firewall and maintain connectivity, while you fix the firewall.
I'd sell the router, myself........🙂